General
- Target RempahSoundPilot-Setup-0.1.0.exe
- Size 136KB
- Sample260718-wwqeaacy8w
- SHA256 0a6a28ed3cad81c9257d35956700b4cdddc2c3ec495ea0965a7e897c982a4283
- MD5 f89f8bc26c99248ec26a0599c010fe17
- SHA1 fcbdbbb8f46319fba4e12328fdb7709c7ca831ab
- SHA512 af7bfea399c9d09261774c3f0388e00c34eda7a156953aec8547b28a163b48a6b5fb3e29b9b378808a4270cd0970fa3e7aeaf06e41cd19e97604c839a7835ad6
- SSDEEP 3072:s6m21e7v4GYsGk0nuQqjDpWpIQlW5Hy9W:3XEb4CDsl79
- TLSH T181D36A0477F88621DBFF5B74BDB4122807F6BD1A6A31E39E4E8514DE0E62B808D60763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RempahSoundPilot-Setup-0.1.0.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RempahSoundPilot-Setup-0.1.0.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target RempahSoundPilot-Setup-0.1.0.exe
- Size 136KB
- SHA256 0a6a28ed3cad81c9257d35956700b4cdddc2c3ec495ea0965a7e897c982a4283
- MD5 f89f8bc26c99248ec26a0599c010fe17
- SHA1 fcbdbbb8f46319fba4e12328fdb7709c7ca831ab
- SHA512 af7bfea399c9d09261774c3f0388e00c34eda7a156953aec8547b28a163b48a6b5fb3e29b9b378808a4270cd0970fa3e7aeaf06e41cd19e97604c839a7835ad6
- SSDEEP 3072:s6m21e7v4GYsGk0nuQqjDpWpIQlW5Hy9W:3XEb4CDsl79
- TLSH T181D36A0477F88621DBFF5B74BDB4122807F6BD1A6A31E39E4E8514DE0E62B808D60763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.